Call: 797
SetFlag: 2=0
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Jump: 891
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Jump: 935
Jump: 964
Current time UTC: 2023-04-09 06:25:55
Npcap Installer version 1.73
Command line: '"C:\Users\User\Downloads\npcap-1.73.exe" '
Call: 1438
Jump: 1470
DetailPrint: Windows CurrentVersion: 10.0.19045 (Win10)
Call: 265
Jump: 321
Call: 265
Jump: 321
Call: 265
Jump: 1072
Call: 1944
SetFlag: 13=6
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\modern-header.bmp"
WriteINIStr: wrote [Field 1] State=0 in C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini
WriteINIStr: wrote [Field 1] Flags=DISABLED in C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini
Jump: 1100
WriteINIStr: wrote [Field 2] State=0 in C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini
Jump: 1113
WriteINIStr: wrote [Field 3] State=1 in C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini
Jump: 1126
WriteINIStr: wrote [Field 4] State=1 in C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini
Jump: 1139
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\InstallOptions.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\InstallOptions.dll" (overwriteflag=1)
Jump: 1174
Jump: 1179
New install of "Npcap 1.73" to "C:\Program Files\Npcap"
Section: "WinPcap"
CreateDirectory: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 308688 to "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\NPFInstall.exe"
Call: 265
Jump: 321
Call: 265
Jump: 321
IfFileExists: file "C:\Program Files\Npcap\uninstall.exe" exists, jumping 0
Jump: 1713
IfFileExists: file "C:\Program Files\Npcap\uninstall.exe" exists, jumping 0
Call: 1633
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000003"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004"
Call: 1249
SetFlag: 2=0
DetailPrint: RunUninstaller: "C:\Program Files\Npcap\uninstall.exe" /Q /keep_logs=yes /no_kill=no _?=C:\Program Files\Npcap
settings logging to 0
Call: 284
SetFlag: 2=0
Call: 892
SetFlag: 13=6
SetFlag: 2=0
Delete: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp"
CreateDirectory: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp" (0)
CreateDirectory: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp" created
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: wrote 19664 to "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Jump: 378
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Jump: 422
Jump: 451
Current date: 2023-04-09 01:26:02
Npcap Uninstaller version 1.72
Command line: '"C:\Program Files\Npcap\uninstall.exe" /Q /keep_logs=yes /no_kill=no'
SetFlag: 12=0
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Jump: 507
Call: 116
Call: 122
Jump: 139
Jump: 156
Call: 160
SetFlag: 2=0
Jump: 218
Jump: 180
Jump: 250
Call: 160
SetFlag: 2=0
SetFlag: 2=1
Call: 160
SetFlag: 2=0
Jump: 180
Call: 160
SetFlag: 2=0
Jump: 180
Jump: 225
Jump: 278
Uninstaller window title: Npcap 1.72
Call: 892
SetFlag: 13=6
File: overwriteflag=0, allowskipfilesflag=2, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\modern-header.bmp"
File: wrote 70976 to "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\modern-header.bmp"
Call: 113
Aborting: "no_confirm"
New install of "Npcap 1.72" to "C:\Program Files\Npcap"
Section: "Uninstall"
DetailPrint: Reading service options from registry
Call: 742
Call: 46
Jump: 62
Jump: 74
CreateDirectory: "C:\Program Files\Npcap" (1)
IfFileExists: file "C:\Program Files\Npcap\NPFInstall.exe" exists, jumping 762
Call: 550
Rename: C:\Windows\system32\wpcap.dll->C:\Windows\system32\wpcap.dll.del
Rename: C:\Windows\system32\Packet.dll->C:\Windows\system32\Packet.dll.del
Rename: C:\Windows\system32\NpcapHelper.exe->C:\Windows\system32\NpcapHelper.exe.del
Rename: C:\Windows\system32\WlanHelper.exe->C:\Windows\system32\WlanHelper.exe.del
Rename: C:\Windows\system32\Npcap\wpcap.dll->C:\Windows\system32\Npcap\wpcap.dll.del
Rename: C:\Windows\system32\Npcap\Packet.dll->C:\Windows\system32\Npcap\Packet.dll.del
Rename: C:\Windows\system32\Npcap\NpcapHelper.exe->C:\Windows\system32\Npcap\NpcapHelper.exe.del
Rename: C:\Windows\system32\Npcap\WlanHelper.exe->C:\Windows\system32\Npcap\WlanHelper.exe.del
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 550
Rename: C:\Windows\system32\wpcap.dll->C:\Windows\system32\wpcap.dll.del
Rename: C:\Windows\system32\Packet.dll->C:\Windows\system32\Packet.dll.del
Rename: C:\Windows\system32\NpcapHelper.exe->C:\Windows\system32\NpcapHelper.exe.del
Rename: C:\Windows\system32\WlanHelper.exe->C:\Windows\system32\WlanHelper.exe.del
Rename: C:\Windows\system32\Npcap\wpcap.dll->C:\Windows\system32\Npcap\wpcap.dll.del
Rename: C:\Windows\system32\Npcap\Packet.dll->C:\Windows\system32\Npcap\Packet.dll.del
Rename: C:\Windows\system32\Npcap\NpcapHelper.exe->C:\Windows\system32\Npcap\NpcapHelper.exe.del
Rename: C:\Windows\system32\Npcap\WlanHelper.exe->C:\Windows\system32\Npcap\WlanHelper.exe.del
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 74
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=2, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: wrote 14544 to "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
No processes using Npcap
DetailPrint: Stopping the npcap driver
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll" (overwriteflag=1)
Call: 560
Delete: "C:\Windows\system32\wpcap.dll.del"
Delete: DeleteFile("C:\Windows\system32\wpcap.dll.del")
Delete: "C:\Windows\system32\Packet.dll.del"
Delete: DeleteFile("C:\Windows\system32\Packet.dll.del")
Delete: "C:\Windows\system32\NpcapHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\NpcapHelper.exe.del")
Delete: "C:\Windows\system32\WlanHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\WlanHelper.exe.del")
Delete: "C:\Windows\system32\Npcap\wpcap.dll.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\wpcap.dll.del")
Delete: "C:\Windows\system32\Npcap\Packet.dll.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\Packet.dll.del")
Delete: "C:\Windows\system32\Npcap\NpcapHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\NpcapHelper.exe.del")
Delete: "C:\Windows\system32\Npcap\WlanHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\WlanHelper.exe.del")
RMDir: "C:\Windows\system32\Npcap"
RMDir: RemoveDirectory("C:\Windows\system32\Npcap\")
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 560
Delete: "C:\Windows\system32\wpcap.dll.del"
Delete: DeleteFile("C:\Windows\system32\wpcap.dll.del")
Delete: "C:\Windows\system32\Packet.dll.del"
Delete: DeleteFile("C:\Windows\system32\Packet.dll.del")
Delete: "C:\Windows\system32\NpcapHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\NpcapHelper.exe.del")
Delete: "C:\Windows\system32\WlanHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\WlanHelper.exe.del")
Delete: "C:\Windows\system32\Npcap\wpcap.dll.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\wpcap.dll.del")
Delete: "C:\Windows\system32\Npcap\Packet.dll.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\Packet.dll.del")
Delete: "C:\Windows\system32\Npcap\NpcapHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\NpcapHelper.exe.del")
Delete: "C:\Windows\system32\Npcap\WlanHelper.exe.del"
Delete: DeleteFile("C:\Windows\system32\Npcap\WlanHelper.exe.del")
RMDir: "C:\Windows\system32\Npcap"
RMDir: RemoveDirectory("C:\Windows\system32\Npcap\")
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 545
Delete: "C:\Program Files\Npcap\LICENSE"
Delete: DeleteFile("C:\Program Files\Npcap\LICENSE")
Delete: "C:\Program Files\Npcap\DiagReport.bat"
Delete: DeleteFile("C:\Program Files\Npcap\DiagReport.bat")
Delete: "C:\Program Files\Npcap\DiagReport.ps1"
Delete: DeleteFile("C:\Program Files\Npcap\DiagReport.ps1")
Delete: "C:\Program Files\Npcap\FixInstall.bat"
Delete: DeleteFile("C:\Program Files\Npcap\FixInstall.bat")
Call: 515
CreateDirectory: "C:\Program Files\Npcap" (1)
IfFileExists: file "C:\Program Files\Npcap\npcap_wfp.inf" exists, jumping 519
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll" (overwriteflag=1)
Jump: 533
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll" (overwriteflag=1)
DetailPrint: The npcap service for Win7, Win8 and Win10 was successfully deleted
Jump: 545
IfFileExists: file "C:\Program Files\Npcap\loopback.ini" does not exist, jumping 861
Call: 611
Delete: "C:\Program Files\Npcap\npcap.sys"
Delete: DeleteFile("C:\Program Files\Npcap\npcap.sys")
Delete: "C:\Program Files\Npcap\npcap.inf"
Delete: DeleteFile("C:\Program Files\Npcap\npcap.inf")
Delete: "C:\Program Files\Npcap\npcap_wfp.inf"
Delete: DeleteFile("C:\Program Files\Npcap\npcap_wfp.inf")
Delete: "C:\Program Files\Npcap\npcap.cat"
Delete: DeleteFile("C:\Program Files\Npcap\npcap.cat")
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Delete: "C:\Windows\system32\Drivers\npcap.sys"
Delete: DeleteFile("C:\Windows\system32\Drivers\npcap.sys")
IfFileExists: file "C:\Windows\system32\Drivers\npf.sys" does not exist, jumping 736
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll" (overwriteflag=1)
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll" (overwriteflag=1)
DeleteRegKey: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst"
DeleteRegKey: "HKEY_LOCAL_MACHINE\Software\Npcap"
Delete: "C:\Program Files\Npcap\NPFInstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\NPFInstall.exe")
Delete: "C:\Program Files\Npcap\CheckStatus.bat"
Delete: DeleteFile("C:\Program Files\Npcap\CheckStatus.bat")
Call: 892
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Program Files\Npcap\uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
Delete: DeleteFile failed("C:\Program Files\Npcap\Uninstall.exe")
Delete: "C:\Program Files\Npcap\loopback.ini"
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory on Reboot("C:\Program Files\Npcap\")
SetFlag: 4=0
SetFlag: 0=1
Jump: 25
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\User\AppData\Local\Temp\nsuD9EB.tmp\")
logging set to 1
Delete: "C:\Program Files\Npcap\uninstall.exe"
Delete: DeleteFile("C:\Program Files\Npcap\Uninstall.exe")
RMDir: "C:\Program Files\Npcap"
RMDir: RemoveDirectory("C:\Program Files\Npcap\")
RMDir: RemoveDirectory failed("C:\Program Files\Npcap\")
SetFlag: 2=0
Call: 1210
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
No processes using Npcap
Call: 1340
Call: 1300
SetFlag: 2=0
SetFlag: 2=0
Call: 1300
SetFlag: 2=0
SetFlag: 2=0
Call: 1330
IfFileExists: file "C:\Windows\system32\packet.dll" does not exist, jumping 1334
IfFileExists: file "C:\Windows\system32\wpcap.dll" does not exist, jumping 1337
IfFileExists: file "C:\Windows\system32\pthreadVC.dll" does not exist, jumping 1340
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Delete: "C:\Windows\system32\drivers\npf.sys"
Call: 1330
IfFileExists: file "C:\Windows\system32\packet.dll" does not exist, jumping 1334
IfFileExists: file "C:\Windows\system32\wpcap.dll" does not exist, jumping 1337
IfFileExists: file "C:\Windows\system32\pthreadVC.dll" does not exist, jumping 1340
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Jump: 1361
SetFlag: 1=1
RMDir: "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap"
CreateDirectory: "C:\Program Files\Npcap" (1)
Call: 1472
File: overwriteflag=0, allowskipfilesflag=2, name="LICENSE"
File: wrote 11784 to "C:\Program Files\Npcap\LICENSE"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.bat"
File: wrote 1073 to "C:\Program Files\Npcap\DiagReport.bat"
File: overwriteflag=0, allowskipfilesflag=2, name="DiagReport.ps1"
File: wrote 18078 to "C:\Program Files\Npcap\DiagReport.ps1"
File: overwriteflag=0, allowskipfilesflag=2, name="FixInstall.bat"
File: wrote 2513 to "C:\Program Files\Npcap\FixInstall.bat"
Sleep(100)
File: overwriteflag=0, allowskipfilesflag=2, name="Uninstall.exe"
File: wrote 1083400 to "C:\Program Files\Npcap\Uninstall.exe"
Call: 1853
CreateDirectory: "C:\Windows\system32" (1)
Call: 1848
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 420816 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175056 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 130512 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 217040 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1848
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 420816 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 175056 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 130512 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 217040 to "C:\Windows\system32\Npcap\WlanHelper.exe"
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="NPFInstall.exe"
File: wrote 308688 to "C:\Program Files\Npcap\NPFInstall.exe"
Call: 1870
DetailPrint: Installing NDIS6 x64 driver for Win10
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.sys"
File: wrote 77296 to "C:\Program Files\Npcap\npcap.sys"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.cat"
File: wrote 12715 to "C:\Program Files\Npcap\npcap.cat"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap.inf"
File: wrote 9003 to "C:\Program Files\Npcap\npcap.inf"
File: overwriteflag=0, allowskipfilesflag=2, name="npcap_wfp.inf"
File: wrote 2435 to "C:\Program Files\Npcap\npcap_wfp.inf"
Jump: 1896
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
Call: 1562
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Npcap" "WinPcapCompatible"="0x00000001"
Jump: 1571
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Npcap" ""="C:\Program Files\Npcap"
Call: 1864
CreateDirectory: "C:\Windows\system32" (1)
Call: 1859
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 491984 to "C:\Windows\system32\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 220624 to "C:\Windows\system32\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 157136 to "C:\Windows\system32\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 267216 to "C:\Windows\system32\WlanHelper.exe"
CreateDirectory: "C:\Windows\system32\Npcap" (1)
CreateDirectory: "C:\Windows\system32\Npcap" created
Call: 1859
File: overwriteflag=0, allowskipfilesflag=2, name="wpcap.dll"
File: wrote 491984 to "C:\Windows\system32\Npcap\wpcap.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="Packet.dll"
File: wrote 220624 to "C:\Windows\system32\Npcap\Packet.dll"
File: overwriteflag=0, allowskipfilesflag=2, name="NpcapHelper.exe"
File: wrote 157136 to "C:\Windows\system32\Npcap\NpcapHelper.exe"
File: overwriteflag=0, allowskipfilesflag=2, name="WlanHelper.exe"
File: wrote 267216 to "C:\Windows\system32\Npcap\WlanHelper.exe"
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll" (overwriteflag=1)
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallString"=""C:\Program Files\Npcap\uninstall.exe""
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "QuietUninstallString"=""C:\Program Files\Npcap\uninstall.exe" /S"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayIcon"="C:\Program Files\Npcap\uninstall.exe"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "UninstallPath"="C:\Program Files\Npcap"
Call: 1492
CreateDirectory: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp" (1)
SetFlag: 2=0
File: overwriteflag=0, allowskipfilesflag=2, name="roots.p7b"
File: wrote 1971 to "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\roots.p7b"
Call: 1477
DetailPrint: Adding roots.p7b to store "Root"
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\roots.p7b"
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\roots.p7b")
CreateDirectory: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp" (1)
SetFlag: 2=0
File: overwriteflag=0, allowskipfilesflag=2, name="signing.p7b"
File: wrote 7347 to "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\signing.p7b"
Call: 1477
DetailPrint: Adding signing.p7b to store "TrustedPublisher"
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
Delete: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\signing.p7b"
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\signing.p7b")
DetailPrint: Clearing Npcap entries from driver store
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
DetailPrint: Installing WFP callout driver
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
DetailPrint: Installing NDIS filter driver
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
Jump: 1540
DetailPrint: The npcap service was successfully created
Jump: 1562
DetailPrint: Writing service options to registry
Call: 1571
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "LoopbackSupport"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "DltNull"="0x00000001"
WriteRegStr: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Edition"="Npcap"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "AdminOnly"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "Dot11Support"="0x00000001"
Jump: 1584
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "VlanSupport"="0x00000000"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap\Parameters" "WinPcapCompatible"="0x00000001"
Jump: 1594
Call: 1630
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap" "Start"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\npcap_wifi" "Start"="0x00000004"
Call: 1622
DetailPrint: Starting the npcap driver
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
Jump: 1812
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayName"="Npcap"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "DisplayVersion"="1.73"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "Publisher"="Nmap Project"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLInfoAbout"="https://npcap.com/"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "URLUpdateInfo"="https://npcap.com/#download"
WriteRegStr: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "InstallLocation"="C:\Program Files\Npcap"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMajor"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "VersionMinor"="0x00000049"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoModify"="0x00000001"
WriteRegDWORD: "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NpcapInst" "NoRepair"="0x00000001"
Call: 1636
CreateDirectory: "C:\Program Files\Npcap" (1)
File: overwriteflag=0, allowskipfilesflag=2, name="CheckStatus.bat"
File: wrote 815 to "C:\Program Files\Npcap\CheckStatus.bat"
DetailPrint: Creating npcapwatchdog scheduled task
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll" (overwriteflag=1)
DetailPrint: Scheduled task created.
Jump: 27
Call: 1944
SetFlag: 13=6
File: overwriteflag=1, allowskipfilesflag=0, name="C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\InstallOptions.dll"
File: skipped: "C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\InstallOptions.dll" (overwriteflag=1)
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\final.ini")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\InstallOptions.dll")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\modern-header.bmp")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\NPFInstall.exe")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\nsExec.dll")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\options.ini")
Delete: DeleteFile("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\System.dll")
RMDir: RemoveDirectory("C:\Users\User\AppData\Local\Temp\nsjBFFB.tmp\")
